$ git clone -n https://gitee.com/src-anolis-os/shim-unsigned-aarch64.git /var/lib/mock/dist-an23-build-python3.11-403886-72390/root/chroot_tmpdir/scmroot/shim-unsigned-aarch64 Cloning into '/var/lib/mock/dist-an23-build-python3.11-403886-72390/root/chroot_tmpdir/scmroot/shim-unsigned-aarch64'... $ git reset --hard origin/a23.1 HEAD is now at 5037a1e CVE fix CVE-2023-40546 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551